By year
00
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited Citrix flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory BufferExploited since Oct 4, 2026 · CVSS 8.7
- CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory BufferExploited since Sep 27, 2026 · CVSS 9.5
- CVE-2026-88771 Citrix NetScaler Improper Input ValidationExploited since Sep 27, 2026 · CVSS 9.5
- CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or ChannelExploited since Sep 9, 2026 · CVSS 9.3
- CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory BufferExploited since Aug 26, 2026 · CVSS 8.8
- CVE-2026-3055 Citrix NetScaler Out-of-Bounds ReadExploited since Mar 30, 2026 · CVSS 9.3
- CVE-2025-7775 Citrix NetScaler Memory OverflowExploited since Aug 26, 2025 · CVSS 9.2
- CVE-2024-8069 Citrix Session Recording Deserialization of Untrusted DataExploited since Aug 25, 2025 · CVSS 5.1
- CVE-2024-8068 Citrix Session Recording Improper Privilege ManagementExploited since Aug 25, 2025 · CVSS 5.1
- CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds ReadExploited since Jul 10, 2025 · ransomware · CVSS 9.3
- CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer OverflowExploited since Jun 30, 2025 · CVSS 9.2
- CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer OverflowExploited since Jan 17, 2024 · CVSS 8.2
- CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code InjectionExploited since Jan 17, 2024 · CVSS 5.5
- CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer OverflowExploited since Oct 18, 2023 · ransomware · CVSS 9.4
- CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access ControlExploited since Aug 16, 2023 · CVSS 9.8
- CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code InjectionExploited since Jul 19, 2023 · ransomware · CVSS 9.8
- CVE-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication BypassExploited since Dec 13, 2022 · CVSS 9.8
- CVE-2017-6316 Citrix Multiple Products Remote Code ExecutionExploited since Mar 25, 2022 · CVSS 9.8
- CVE-2021-22941 Citrix ShareFile Improper Access ControlExploited since Mar 25, 2022 · ransomware · CVSS 9.8
- CVE-2019-12991 Citrix SD-WAN and NetScaler Command InjectionExploited since Mar 25, 2022 · CVSS 8.8
- CVE-2019-12989 Citrix SD-WAN and NetScaler SQL InjectionExploited since Mar 25, 2022 · CVSS 9.8
- CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code ExecutionExploited since Nov 3, 2021 · ransomware · CVSS 9.8
- CVE-2019-13608 Citrix StoreFront Server XML External Entity (XXE) ProcessingExploited since Nov 3, 2021 · ransomware · CVSS 7.5
- CVE-2019-11634 Citrix Workspace Application and Receiver for Windows Remote Code ExecutionExploited since Nov 3, 2021 · ransomware · CVSS 9.8
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information DisclosureExploited since Nov 3, 2021 · CVSS 4.3
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information DisclosureExploited since Nov 3, 2021 · CVSS 6.5
- CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization BypassExploited since Nov 3, 2021 · CVSS 6.5
Latest high and critical flaws
- CVE-2026-53562 Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.High 8.5 · Oct 13, 2026
- CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory BufferExploited · High 8.7 · Oct 4, 2026
- CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory BufferExploited · Critical 9.5 · Sep 27, 2026
- CVE-2026-88771 Citrix NetScaler Improper Input ValidationExploited · Critical 9.5 · Sep 27, 2026
- CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or ChannelExploited · Critical 9.3 · Aug 19, 2026
- CVE-2026-53565 Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows.High 8.5 · Jul 14, 2026
- CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory BufferExploited · High 8.8 · Jun 30, 2026
- CVE-2026-3055 Citrix NetScaler Out-of-Bounds ReadExploited · Critical 9.3 · Mar 23, 2026
- CVE-2025-7775 Citrix NetScaler Memory OverflowExploited · Critical 9.2 · Aug 26, 2025
- CVE-2025-6759 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaSHigh 7.3 · Jul 8, 2025
- CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer OverflowExploited · Critical 9.2 · Jun 25, 2025
- CVE-2025-4879 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsHigh 7.3 · Jun 17, 2025
- CVE-2025-0320 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for WindowsHigh 8.6 · Jun 17, 2025
- CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds ReadExploited · Critical 9.3 · Jun 17, 2025
- CVE-2024-7889 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsHigh 7 · Sep 11, 2024
- CVE-2024-6677 Privilege escalation in uberAgentHigh 7.3 · Jul 11, 2024
- CVE-2024-6286 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsHigh 8.5 · Jul 10, 2024
- CVE-2024-6151 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and DesktopsHigh 8.5 · Jul 10, 2024
- CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer OverflowExploited · High 8.2 · Jan 17, 2024
- CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer OverflowExploited · Critical 9.4 · Oct 10, 2023
- CVE-2023-3467 Privilege Escalation to root administrator (nsroot) High 8 · Jul 19, 2023
- CVE-2023-3466 Reflected Cross-Site Scripting (XSS) High 8.3 · Jul 19, 2023
- CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code InjectionExploited · Critical 9.8 · Jul 19, 2023
- CVE-2023-24492 A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a viCritical 9.6 · Jul 11, 2023
- CVE-2023-24491 A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint wHigh 7.8 · Jul 11, 2023
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.